PT-2013-1097

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.0.4 FFmpeg versions 1.1.x prior to 1.1.2 Description The issue is related to the aac decode init function in libavcodec/aacdec.c, which allows remote attackers to have an unspecified impact via a large number of...

CVE-2013-0869: Improper Restriction of Operations within the Bounds of a Memory Buffer

The fieldend function in libavcodec/h264.c in FFmpeg before 1.1.2 allows remote attackers to have an unspecified impact via crafted H.264 data, related to an SPS and slice mismatch and an out-of-bounds array access...

PT-2013-2668

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to the swr init function in libswresample/swresample.c, which allows remote attackers to have an unspecified impact via an invalid or unsupported input or output channel layout...

PT-2013-2663

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.2 Description The issue is related to an incorrect calculation in the gif copy img rect function, which can lead to an out-of-bounds array access when processing crafted GIF data. This can potentially allow remote...

PT-2013-2671

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to an out-of-bounds array access in the ff add png paeth prediction function, which can be exploited by remote attackers using a crafted PNG image. Recommendations For versions...

PT-2013-2670

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.3 Description The issue is related to the doubles2str and shorts2str functions in libavcodec/tiff.c, which allow remote attackers to have an unspecified impact via a crafted TIFF image. This is due to an...

CVE-2013-0867: Improper Input Validation

The decodesliceheader function in libavcodec/h264.c in FFmpeg before 1.1.2 does not properly check when the pixel format changes, which allows remote attackers to have unspecified impact via crafted H.264 video data, related to an out-of-bounds array access...

PT-2013-2667

Name of the Vulnerable Software and Affected Versions FFmpeg versions prior to 1.1.2 Description The issue is related to an out-of-bounds array access in the field end function in libavcodec/h264.c, which can be triggered by crafted H.264 data, specifically when there is an SPS and slice mismatch...

CVE-2013-0877: Improper Restriction of Operations within the Bounds of a Memory Buffer

The oldcodec37 function in libavcodec/sanm.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via crafted LucasArts Smush data that has a large size when decoded, related to an out-of-bounds array access...

CVE-2013-0875: Undefined Security Weakness

The ffaddpngpaethprediction function in libavcodec/pngdec.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via a crafted PNG image, related to an out-of-bounds array access...

CVE-2013-0864: Undefined Security Weakness

The gifcopyimgrect function in libavcodec/gifdec.c in FFmpeg before 1.1.2 performs an incorrect calculation for an "end pointer," which allows remote attackers to have an unspecified impact via crafted GIF data that triggers an out-of-bounds array access...

CVE-2013-0862: Undefined Security Weakness

Multiple integer overflows in the processframeobj function in libavcodec/sanm.c in FFmpeg before 1.1.2 allow remote attackers to have an unspecified impact via crafted image dimensions in LucasArts Smush video data, which triggers an out-of-bounds array access...

CVE-2013-0876: Undefined Security Weakness

Multiple integer overflows in the 1 oldcodec37 and 2 oldcodec47 functions in libavcodec/sanm.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via crafted LucasArts Smush data, which triggers an out-of-bounds array access...

CVE-2013-0872: Improper Restriction of Operations within the Bounds of a Memory Buffer

The swrinit function in libswresample/swresample.c in FFmpeg before 1.1.3 allows remote attackers to have an unspecified impact via an invalid or unsupported 1 input or 2 output channel layout, related to an out-of-bounds array access...

CVE-2013-0874: Improper Restriction of Operations within the Bounds of a Memory Buffer

The 1 doubles2str and 2 shorts2str functions in libavcodec/tiff.c in FFmpeg before 1.1.3 allow remote attackers to have an unspecified impact via a crafted TIFF image, related to an out-of-bounds array access...

CVE-2013-5139

The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service out-of-bounds array access via a crafted application...

Out-of-bounds

The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service out-of-bounds array access via a crafted application...

CVE-2013-5139

The IOSerialFamily driver in Apple iOS before 7 allows attackers to execute arbitrary code or cause a denial of service out-of-bounds array access via a crafted application...

CVE-2013-5139

The CVE-2013-5139 entry concerns the IOSerialFamily driver. The description (supported by multiple connected records) states that an out-of-bounds array access in IOSerialFamily could allow a crafted application to cause arbitrary code execution or a denial of service. Affected platforms include ...

PT-2013-5385

Name of the Vulnerable Software and Affected Versions Apple iOS versions prior to 7 Description The issue allows attackers to execute arbitrary code or cause a denial of service through an out-of-bounds array access via a crafted application. Recommendations For versions prior to 7, update to...